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DETAILED ACTION 

1. Claims 1-3 are pending. 

2. The after final amendment of 6/22/06 has been received and entered. Claims 4-12 
have been canceled. 



Reasons For Allowance 



In reference to claim 1 : 

"Understanding LDAP" by the International Technical Support Organization.discloses an 
apparatus comprising: 

• At least one processor 

• A memory coupled to the at least one processor (Page 5, paragraph 2) Where a processor 
and memory coupled to at least one processor is understood to be a part of the computer 
system in both the client and server. (Page 5, Figure 1) 

• A directory service server that accesses a directory that has a plurality of 
entries(understood to be a part of LDAP), the plurality of entries including at least one 
proxy entry that contains security information for a corresponding protected resource, the 
directory service server including authentication and authorization functions that 
determine whether a selected one of the plurality of entries may be accessed, where the 
object has an access control list, and access is determined through this access control list. 
(Page 7, Section 1.1.4, Directory Security) & (Page 8, paragraph 1) 
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• A plurality of protected resources that are not stored within the directory, where the 
resources may not be stored within the directory because the directory itself can be 
decentralized or distributed. (Page 6, paragraphs 5-6) 

Understanding LDAP" by the International Technical Support Organization fails to disclose: 

• An application residing in the memory and executed by the at least one processor, the 
application including a logical mapping that correlates each protected resource with a 
corresponding proxy entry, the application determining whether the application is 
authorized to access a selected protected resource by invoking the authentication and 
authorization functions in the directory service server to determine whether the proxy 
entry corresponding to the selected resource may be accessed, and if so, the application 
accesses the selected protected resource, where the logical mappings that correlates with 
the protected resources are LDAP entries, the application determining whether the 
application is authorized to access the resource is the software necessary in an LDAP 
server, and where the information is determined through an ACL. 

Previously, the Examiner argued with respect to (Page 8, paragraph 1) that in any directory, such 
as a folder, there are entries that may be interpreted as proxy entries, in that these entries refer to 
a particular resource or file. It is understood by those of ordinary skill in the art that technically, 
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a directory is merely a logical association, and that it is incapable of physical storage. For this 
reason, the Examiner has argued that any directory with items or files within it necessarily 
contains "proxy" entries — entries that refer to a particular file by means of logical association as 
understood by the operating system or the file service. 

However during the interview of 10/13/05, Applicant's representative clarified the distinction in 
claim 1 in which it is not the operating system or file system, but the application itself which 
"includes the logical mapping correlating each protected resource" with a corresponding proxy 
entry. 

While it is commonplace for an operating system to maintain a logical resource mapping and 
correlation, and while it may said to be obvious that such logical mappings may be utilized with 
the LDAP entries for the protected resources in an operating system setting, no application has 
been found which includes the logical mapping of proxy entries, the application determining 
whether the application is authorized to access software necessary in an LDAP server determined 
through an ACL. 

The Examiner has found the Applicant's arguments to be persuasive. Accordingly, claim 1 is 
allowable. Claims 2 and 3 are allowable because claim 1 is allowable. 



Conclusion 
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Any inquiry concerning this communication from the examiner should be directed to 



Thomas M Ho whose telephone number is (571)272-3835. The examiner can normally be 
reached on M-F from 9:30 AM - 6:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gregory A. Morse can be reached on (571)272-3838. 

The Examiner may also be reached through email through Thomas.Ho6@uspto.gov 

Any inquiry of a general nature or relating to the status of this application or proceeding should 

be directed to the receptionist whose telephone number is (571)272-2100. 

General Information/Receptionist Telephone: 571-272-2100 Fax: 571-273-8300 
Customer Service Representative Telephone: 571-272-2100 Fax: 571-273-8300 
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